Before I started using syslog-ng, I used good old default syslogd. That one captured all the packages detected by my iptables firewall. I don't know what facility/priority, but they were shown in my logfiles.

The default syslog-ng configuration don't show them, so wrote my own configuration to split up all the facilities and priorities (yes, that's a really big configurationfile )

Now my /var/log is full of different logfiles, but the packages blocked by iptables are still not shown.

But still a question: The default configuration didn't show them. I think it is because kern-messages with priority warning and lower aren't logged by default. With good old klogd there was an option '-c <loglevel>'. Default the loglevel is 5, but I set it to 4 (to include the netfilter warnings).
How can we change the minimum loglevel for kernel messages?